STOP Spysheriff Trojans

How to STOP Spysheriff and never comeback to user's PC?
After we delete the spysheriff trojans using Spybot S&D, the icons are already cleaned. But after couple of weeks, the shadow of icons will comeback & if you scan it again using that program, it'll be detected again you need to delete it again.
So the question is, how to STOP that Trojan for coming back?

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

My response for David-Howard:
- I've test it already, scan in Safe Mode, but didn't help to fix/delete the malwares, spies, & other Trojans.

My response for Allamz:
- I've test it as well, found some Object Infected, around 1-3 items only, mostly in registry values. But didn't help fix/delete the other malwares, spywares, specially the spysheriff trojan.

Both suggestions, I've tested it on PC's that are infected with Malwares, Spywares, & other Trojans.

You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

You have 2 antivirus?
You only need one antivirus and one firewall, having 2 will not give you better protection infact it will just cause conflicts and inefficient protection.

Run combofix again using this script.
1. Open Notepad.
2. Now copy/paste the text between the lines below into the Notepad window:
------------------------------------------------------------------------
File::
c:\windows\_id.dat
c:\windows\adobe.bat
c:\windows\system32\bdod.bin

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a924e04-f8a6-11dd-8ea2-e44ae81cb512}]
------------------------------------------------------------------------
3. Save the above as CFScript.txt in the same location as Combofix.exe.
4. Then drag the CFScript.txt into ComboFix.exe. This will start ComboFix again.

Did Spybot gives you what reg key or the location of the Spysheriff?
There is one entry there that I haven't got any info about.